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Introduction 



■^ ' Let Xi and X2 be two curves of genus g > 2 over a field k. We wish to quickly 

determine the (possibly empty) set of isomorphisms between them. The standard 
strategy mainly consists in interpolating the isomorphisms at Wcicrstrass or small 
degree places, depending on whether the characteristic of the field is zero or posi- 
tive [f 1]. This yields algorithms of complexity at least 0{g^) in general, and still 
at least 0{g^) in very favorable cases. 

In this article we restrict to hyperelliptic curves with equations Xi : y ~ fi{x) 
^ . over a field k of characteristic different from 2. The issue can then be rephrased 

Cp ' in terms of isomorphisms of degree 2g + 2 polynomials under the Mobius action 

of GL2(fc) (see Section 1.5.1). Our first contribution is to show how to compute 
the set of isoinorphisms in a much faster way by combining two new ideas. The 
first one uses the factorization of the Mobius action into a diagonal matrix times 
a second matrix whose diagonal coefficients are equal to 1. It allows to perform 



m 

*vj . the computation of the isomorphisms with only univariate polynomial calculations 

(see Section 1.2). The second idea relics on a classical generalization of invariants, 
called covariants (sec Section 1.3). Using them, we can reduce our search for an 
isomorphism between /i and /2 to the search of an isomorphism between polyno- 

^^ , mials of lower degree. This gives us an algorithm for generic hyperelliptic curves 

of quasi-linear complexity in g (see Section 1.4). In the genus 2 and 3 cases, we 
analyze the small locus of curves where our strategy fails (see Section 1.5.2). The 
use of covariants was inspired by [22], where one applies covariants along with a 
miraculous isomorphism from representation theory to generically reduce the iso- 
morphism question for ternary quartics to that for binary quartics. 

In a related direction, thanks to covariants, we get both theoretical and practical 
results on descent of hyperelliptic curves. Let X be a hyperelliptic curve defined 
over k and let Mx be its field of moduli, as defined in Definition 2.1. If Mx is a 
field of definition of X, then it is its minimal field of definition (up to a possible 
purely inseparable extension). 
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In Section 2. we first make precise how invariants can be used to get information 
on tlic field of moduli. This is probably well-known but we could not find it in the 
literature. After this, we consider when the field of moduli is also a field of definition; 
when, in other words, the curve can be descended to its field of moduli. General 
results on this question can be found in [13]. In practice, though, computing an 
explicit model over Mx for X can be a very hard task, as explained in Section 2.2.1. 
The main difficulty lies in finding an explicit small degree extension over which a 
descent isomorphism is defined. As far as we know, there is no easy general way to 
find such a descent, except when k is finite or when the geometric automorphism 
group is trivial. 

Moreover, there is a refinement of the descent question for hyperelliptic curves, 
namely to ask for a descent to a model of the form y^ = fi^), which introduces 
additional difficulties. The 'magic' of the covariant method is to reduce this problem 
to lower genus, where a solution may be more easy to determine (Theorem 2.8). 
In the typical case of elliptic curves, for example, there is always an explicit model 
over the field of moduli and we can determine a descent isomorphism to this model 
thanks to the first part of our work. It turns out that in suitable cases, this descent 
induces a descent of the original hyperelliptic curve to its field of moduli. 

We illustrate this descent to the field of moduli for genus 3 hyperelliptic curves 
with automorphism group (Z/2Z)'^, a case which remained unsolved in [17], see 
Section 2.3.1. We also look at the case with automorphism group (Z/2Z)^ for 
which the field of moduli is not always a field of definition and we prove that we 
can always find a model over at most a quadratic extension of this field. Finally 
in Section 2.4, we show that our method can be used to descend families of curves 
with the example of a dimension 3 family of genus 5 hyperelliptic curves from [9] . 

We stress that we are merely beginning to exploit the full strength of these new 
ideas. An article on non-hyperelliptic curves is in progress. We are also developing a 
general version of Van Rijnswou's algorithms that is much more effective over finite 
fields and number fields. Finally, we seek to obtain new theoretical and practical 
descent results by analyzing the infiuence of twists on covariants. 

Notations. In the following, k denotes a field of characteristic p (prime or 0) with 
algebraic closure K. Hyperelliptic curves are additionally assumed to be smooth, 
so that when a singular affine model of a curve is given, we actually consider its 
desingularization. Unless noted otherwise, (iso)morphisms are defined over the base 
field k. We use the following notation for groups: C„ = Z/nZ; D„ is the dihedral 
group with n elements; Ug is the group with 24 elements defined by (5*, T) with 
512 == t2 == 1 and TST = 5^; Vg is the group with 32 elements defined by {S,T) 
with S^ = T^ = {STf = {S~^Tf = 1; S„ is the symmetric group over n. Finally, 
for two 'objects' (polynomials, matrices, etc.) /i,/2 over a field k, we will denote 
./i ~ ./2 if there exists A € fc* such that /i = X ■ f2- 

1. Isomorphisms between forms and hyperelliptic curves 

1.1. Isomorphisms of binary forms. Let n > 1 be an integer, let V = fc^ be the 
fc-vector space with basis {x,z) and let S'"{V) be the {n + l)-dimensional vector 
space of homogeneous forms X]r=o ^«^*-^"~* '-'^ degree n in (x, z). In the sequel, 
we call an element of S^{V) a (binary) form. When n = 0, we let S'^{V) = k. 
Let G C GL2(fc) and let M e G. If a form / e S"{V) then M.f is defined by 
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{M.f){x, z) = f{M~^{x, z)), where the action of a matrix on (x, z) is the standard 
action on *(a:, 2). 

Definition 1.1. Let /i,/2 be forms of degree n > 1 over a field k. We denote 
fsom(/i, /2) C PGL2(A:) the set of matrices M such that A/./i ^ /2. Additionally, 
we denote Aut(/i) = Isom(/i,/i). 

If Isom(/i, 72) 7^ 0, this set is a homogeneous space over Aut(/i). In particular 
Isom(/i, /2) = M Aut(/i) for any M e Isom(/i, /s). 

Let / be a form of degree n over k. Over K , we can write / = 0^=1 ("^i^ ~ Piz)"^^ 
where {ai,/3i) € K^ \ {(0,0)} and rii € N. We associate to such a form its square- 
free part / = ni=i('^i^ ~ Piz), which is defined up to a multiplicative constant. 
The action of M on / reflects the classical Mobius action of PGL2(iir) on the roots 
{ai : Pi) G P}f of /. In particular, two forms of the same degree are iiT-isomorphic 
if and only if there exists an M e Gh2{K) mapping the set of roots of the first 
form to the set of roots of the second form. Hence 

Lemma 1.2. A\\iK{f) is finite if and only if s > 3, i.e. deg(/) > 3. Moreover 
AutA-(/) C Ant K if). 

1.2. The direct approach. The classical method to compute isomorphisms be- 
tween two binary forms /i, /2 of degree n over a field k is to find a PGL2(A:)- 
transformation of P^ which maps the roots of the first form to the root of the 
second form. The most time-consuming task is to compute an isomorphism be- 
tween the splitting fields defined by /i and /2. Even in the most favorable case, 
that is, a finite field k, the fastest algorithms need at least 0(n^'^+°'^^)) operations 
in k (see [14])). 

We show here that it is actually possible to get rid of this cumbersome ring 
isomorphism computation, and describe an algorithm of time complexity only quasi- 
linear in n. This algorithm takes as input /i = J^i Aix'^z'^~'^ and /2 = 'Y^^ Bix'^z"~^ 
of equal degree n > 3 and with at least three distinct roots. It returns matrices 
representing the elements of Isom(/i, 72). 

Firstly, we suppose that An-i is equal to zero. Note that this is typically not a big 
restriction, since we may apply linear transformations to /i. A notable exception 
is when p divides n. We therefore assume that p is prime to n. 

Secondly, determining Isom(/i,/2) is equivalent to determining the matrices 
M = {rrii^j) e GL2(fc) such that 

/2("T-ii X -\- mi2 z, 771,21 X + 7Ti22 z) ~ Xfi{x, z) for somc A € fc* . (1) 

Thirdly, because of homogeneity, we may suppose that the A in (1) equals 1 
after enlarging fc by a radical extension if necessary. Note that though this radical 
extension is a priori unknown, the details of the algorithm below will show how it 
can be determined. 



l/a 13/5 
7/a 1/(5 



Finally, we may suppose that the M in (1) are of the form A/ 

Of course this may not be true, because a zero may occur on the diagonal of one 
of these M . However, one can fix this situation by applying a suitable change of 
variables to /2. 

The equation /2(mii x + mi2 z, ?7i2i x + 77122 z) = fi{x, z) now becomes 

f2{,x + (iz,^x + z) = fi{ax,6z) . (2) 
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Equating the coefficients of x" in both sides of this equation yields An a" = /2(1,7) , 
and we can write a" 



in terms of 7. Similarly, the equality of the coefficients of 



z, 



enables us to write /3 
of a;"-'z\ i = 2,..., 
equations of the form 



' dz 



^t<'-^)-t('-' 







in term of 7 too. More generally, equating the coefBcients 
n, where we substitute a" and /3 in term of 7 yields n — 1 



a^ij: 



j=0 



dx 



d\f2 



dx^dz' ^ 



(1,7)^ 



dh 

dx 



(1,7) 



/2(1,7). (3) 



Note that the left hand side of (3) is actually a polynomial multiple of f2{x, z) and 
we can divide both sides by /2. This yields equations of degree i[n — 1) in 7 and 
of degree i in 5 /a. 

Now, dividing the square of (3) specialized at i = 3 by the cube of (3) specialized 
at i = 2 allows to eliminate the unknown 5 /a. We end up with a polynomial of 
degree 6(n — 2) in 7. Similarly, when n > 3, dividing (3) specialized at i = 4 by 
the square of (3) specialized at i = 2 yields a polynomial of degree 4 (n — 2) in 7. 
Taking the gcd, we obtain a polynomial of low degree with root 7. Generically, this 
gcd is of degree 1. 

Under the assumptions made, the algorithm is therefore straightforward. For 
each possible 7, we compute a, (3 and S and check whether the resulting matrix is 
inIsom(/i,/2). 

The computations involved in this algorithm (taking gcds of polynomials of de- 
gree 0(n), taking nth roots, etc.) are all of time complexity quasi-linear in n. 

We have implemented the algorithm in MAGMA V2.18-2 and have timed the 
resulting procedure, IsGL2EquivFast, on a laptop (based on a Intel Core i7 
M620 2.67GHz processor) for irreducible forms of increasing degree, the most 
favorable case for the native MAGMA routine IsGL2Equivalent. We compare with 
IsGL2Equivalent, which implements the classical method, first over the finite field 
]Fiooo7, then over the rationals with coefficients bounded by ±2. The results are in 
Table 1; entries '-' stand for computations aborted after 1 hour (see Section 1.4 for 
the definition of IsGL2EquivCovaricLnt). 

As concluding remarks, we note first of all that this algorithm is just as suitable 
for determining X-isomorphisms. Moreover, in the special case of binary quartics, 
it is just as efficient as the algorithm given in [5]. 
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IsGL2EquivFast 














0.1 


0.2 


0.6 
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30 


382 


5850 




IsGL2EquivCovarlaiit 























0.2 


0.6 


3.4 


7 



Table 1 . Timings for isomorphisms between forms of degree 2g -1- 2 (seconds) 



ISOMORPHISMS AND DESCENT OF HYPERELLIPTIC CURVES 5 

1.3. The covariant approach. Let k be an infinite field of characteristic p and 
n > 1 be an integer. 

Definition 1.3. Lot r > be an integer. A homogeneous polynomial function 
C : S^{V) — )■ S^{V) of degree d is a covariant if there exists oj G Z such that for 
aU M G G and aU / G S"{V), we have 

C{M.f) = det(A/)-" • M.C{f) . 

When r = 0, such a C is called a (relative) invariant and denoted by /. 

The integer r is called the order of a covariant. li nd~r is odd, then a covariant 
is necessarily zero. Otherwise the integer w is unique and called the weight. It is 
equal to (nd—r)/2. In the sequel, we often identify C with C(/) for a general form 
/ G F{ao, . . . , an)[x, z] where F is the prime field of k. For instance, the identity 
function S'^(V) — > S"{V) is a covariant of degree 1 and of order n that we identify 
with / itself. 

Remark 1.4. The determinant factor prevents to add covariants of different weights 
when G = GL2 {K) . Hence one generally studies the graded algebra C„ of covariants 
and I„ of invariants under the action of SL2 {K) . It is easy to see that the homo- 
geneous elements of C„ and X„ actually are all the covariants or invariants under 
the action of GL2(i^). Despite this ambiguity, in the rest of the article we work 
with G = GL2 {K) instead of SL2 {K) because, in practice, it can avoid a quadratic 
extension of k when looking for an isomorphism M between two forms. 

There is a large literature on how to generate invariants and covariants starting 
from /. Gordan's algorithm [10] allows to find a set of generators for the algebras 
Cn and I„ thanks to the use of differential operators, called h-transvectants and 
defined as follows. Given two covariants Ci, G2 of degree di,d2 and of order ri, r2 
and ft, > 1 an integer, we can create a new covariant, denoted {Ci,C2)h usually 
defined as [19, p. 88] 

(ri-fe)!(r2-fe)! A .^ /h\ d^G^ d^G^ 

r\\r2\ t^ Vv dx^-'-dz^ dxWz'^-' ' 

In practice, we use the univariate counterpart. Looking at Ci, C2 has univariate 
polynomials in x/z, we get [19, Th.5.6] 

, , (ri - hy.{r2 ~hy. ^ , /n - A fr2-h + A d^'-'Ci d^G^ 

ri!r2! ^^ ' \h-ij [ i J dx^-^ dx' ' ^' 

Effective computations of sets of generators when A' = C have been worked out for 
n up to 10 (see [7, 23, 8, 1, 21, 6, 3, 2]). It has been shown that these computations 
are still valid for 5 = 2 if p 7^ 2, 3, 5 [16] and for 5 = 3 if p 7^ 2, 3, 5, 7 [17] when 
replacing C by an algebraically closed field K of characteristic p. 

Our second idea to compute isomorphisms between forms of a given degree is 
to reduce the question to smaller degree by using covariants. Indeed, the following 
genuine observation is a simple consequence of the definition itself. 

Proposition 1.5. Let /i,/2 &e forms of even degree n over a field k. Let G be a 
covariant of order r for binary forms of degree n, defined over the prime field of k 
and a = G{fi) G S^{V). Then Isom(/i,/2) C Isom(ci,C2) . 
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We illustrate this idea and study its limits with the computation of isomorphisms 
for forms and hyperelliptic curves in Sections 1.4 and 1.5. As we want Ci of the 
smallest degree possible and Isom(ci,C2) finite, we want that deg(c'i) > 3. Actually, 
in the sequel, we mostly deal with forms of even degree and hence non-zero covari- 
ants arc of even order. The smallest degree is then 4 and as we give some details 
for further reference. 

Consider a binary quartic q = 04^^ + a^x^z + a2x'^z'^ + aixz^ + uqz'^ over k with 
p y^ 2,3. Then we define 

/ = I{q) =120400 — 80301 + 02, (5) 

J = J{q) =72040200 + 903O2O1 — 2704O1 — 2700O3 — 2o2, 

as in [5]. The form q has distinct roots if and only if A = 4/^ — J^ 7^ 0. Given 
I, J G K such that A 7^ 0, one can easily reconstruct a form with at least three 
distinct roots which is i^-isomorphic to q. We can take 

q = x^z-27I^/J^ xz^-27l'-^/J^ z"^ if J 7^ and q = x^z + xz^ otherwise. (6) 

Concerning the geometric automorphisms of binary quartics, we have the follow- 
ing easy result for which we could not find a reference. 

Proposition 1.6. Let q be a binary quartic form with invariants I, J over K. 
Suppose ttiat A 7^ 0. Then 

( Ai iU = 0, 
Aut(q) ^ I Dg if J = 0, (7) 

[ D4 otherwise. 

Proof. Let A C F^{K) be the set of four roots of q. Using the 3-transitivity of 
the action of PGL2(iir) on P^(if ), we may assume that A = {0, 1, 00, A} for some 
A e ^\{0, 1}. Then the transformation x 1-)- X/x induces the permutation (Ooo)(lA) 
of A. By symmetry, we see that Stab(A) C Sym(A) contains the Viergruppe D4 C 
Sym(A). 

We are reduced to analysing when Stab (A) properly contains D4. Since the 
extension 1 — > D4 — > S4 — > S3 — > 1 is split and all subgroups of S3 of equal order 
are conjugate, this is in turn equivalent to determining when Stab(A) contains an 
additional given two- or three-cycle. These cases give rise to the exceptional groups 
in (7) or order 8 and 12. 

First let us see for which A the permutation (lA) is in Stab(A). In this case, the 
fractional linear transformation fixes and cxd and is therefore of the form x M- ex. 
This only gives a new automorphism ifc=— 1, soA = — 1 and J = 0. 

In the case where the permutation (OlA) is in Stab(A), a slightly more involved 
calculation gives that X ^ (3 + 1 iov a, primitive third root of unity (3, and in that 
case / = 0. D 

We will also need in the sequel the following result. 

Proposition 1.7. Let q be a binary quartic form defined over k with distinct roots 
and let q be the form defined by (6). Assume that I(q) 7^ and J{q) 7^ 0. Then a 
K -isomorphism between q and q = z{x^ + bixz'^ + boz^) is defined over any extension 
of k where q has a root. 
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Proof. Let k' be an extension of k where q has a root. By a change of variable 
defined over k' , we can map this root on infinity and hence q onto q' = zr where 
r = x^ + axxz^ + aqz'^ S k'\x^ z]. Now since 

I{q') = -a,/ A, Jig') = -ao/f6,/(q) = -6i/4, J(q) = -5o/16, 

we get the relation af/a^ = b\/b'^. Hence if wc define A = 'jf\iii\ G fc', the 
/c'-isomorphism M : {x, z) i— > {\x, z) maps q' onto q. D 

f .4. Generic forms of even degree. We now describe an algorithm that is based 
on the ideas of Sections f.2 and 1.3 to compute the isomorphisms between two 
generic binary forms /i and /2. Our notation is as in 1.2. The following algorithm, 
denoted IsGL2EquivCovariant, returns the matrices M = {Tiii,j)i,j in PGL2(A:) 
such that M./i ^ /2 for two forms /i and /2 of same degree n > 3. 

Order loop: For increasing order o starting from 3 to the bound Border do 

Degree loop: For increasing degree d starting from 2 to the bound -Bdogrco do 

• Compute a random covariant C of order o and degree d using transvec- 
tants. 

• If C(/i) is of degree at least 3, then compute Isom(C(/i), C(/2)) and 
return the elements which induce isomorphisms between /i and /2. 

• Otherwise, repeat for a fixed number -Bginguiar of times the following 
procedure. 

— Compute a new random covariant C" of order o and degree d 
using transvectants and replace C by the covariant C + k,C' for 
some random n in the field k. 

— If C{fi) is of degree at least 3, then compute Isom(C'(/i), C{f2)) 
and return the elements which induce isomorphisms between /i 
and /2. 

Failure: Return the result of IsGL2EquivFast(/i, /2). 



For the purpose of computing random covariants. wc follow Gordan [10]. Given 
an order o and a degree d, we construct recursively a covariant C = ( J^ Cd',o' , f )^ 
as a transvectant of some level h of the form / and a product of covariants of 
intermediate orders a' and degrees d', under the two constraints d = '^d' and 
o = n + J2o' -2h. 

When n is even, the transvectant of smallest order and degree is C2.4 = (/, /)n-2- 
The next simplest transvectant is C^^i = ((/, /)„/2, f)n-2, of order 4 and degree 3. 
for large orders and degrees, covariants must be computed 'on the fly', specialized 
for /i and /2, since expressions are far too large to be precomputed. 

So as to completely specify the algorithm, we have to be more precise about 
how to compute covariants and how to choose the loop bounds -Border, ^dogroc and 
^singular- A Straightforward choice for the loop bounds is -Border = 4, -Bdogrco — 2 
and -Bsinguiar = 0. With this choice, only the covariant C2,4 = (/, f)n-2 is tested for 
n even and when it turns out that the discriminant of this covariant vanishes, we go 
back to the method IsGL2EquivFast. First note that the covariant (/, f)n-2 can be 
easily computed. Let C4 x'^ + c^ x^ z + C2 x^ z'^ + ci x z^ + cq z^ denote , _L, (/, f)n-2, 
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we have using (4), 

CO = Y.lZl{-lf{n-k)\{k + 2)\a„_2-kCiu 

ci = Efcio (-1)'°('^- '=)•('= + 2)! (("-l-'=)a„-i-feafe + (fc + l)a„~2-fcafc+i) , 

C2 = ^j:iZl{-'^f{n-k)\{k + 2)\{ (fc + 2)(fc+l)afe+2a„_2_fe 

+ 2 (n-l-fc)(fc + l)afc+ia„_i_fe (8) 

+ (n - fc) (n - 1 - fc) afe a„_fc ) , 

C3 = Y.lZli-^)^{n-k)\{k + 2)\{{n-l-k)a^^kak+i + {k + l)a^_^_kak+2), 
C4 = EfeIo(-l)*('^ -'=)!('= + 2)! «n-fcafc+2. 

Moreover, this setting is a good option for generic forms as the following proposition 
shows. 

Proposition 1.8. Let n > 6 be an even integer and p ^ 2,3. Let f be a generic 
binary form of degree n over k. Then the discriminant of C2,4{f) is non-zero. 

Proof. It is enough to find a single form / of degree n for which C2,4(/) has non-zero 
discriminant. First let us suppose that p is coprime to n{n — 2){n — 3)(n^ + 3n + 6). 
We then take / = a;" + x'"~^z — xz"~^ — 2". Note that this form is in fact non- 
singular because f = {x + z)(x" — i 



We have that 






n^ — n + 6 n 


+ 


4 


■ X z 

n-' 


n 



C2 iif) = - ■x^z + 2- '^r^-^ • ar^z -f - • xz"^. 

n n-^ n 

This form has discriminant equal to 64(n — 3)(n — 2)(n^ + 3n + 6)/n^, which is 
non-zero by hypothesis. 

One calculates similarly that for the other values of p ^ 2, 3, 5, one can use the 
form x" -I- a;"~^z -I- xz"'~^ — z" instead. Indeed, under these hypotheses on p the 
numerator of the resulting discriminant n* + 2n^ + 5n^ — 1271 + 36 is coprime to 
the previous numerator. To finish the proof, p ~ 5 can be excluded using the form 
a;"-hx"-iz-ha;z"-i-h2z". D 

For non-random forms, especially forms of small degree with non-trivial auto- 
morphism group, it may be interesting to test other covariants than merely 6*4,2. 
We then propose the following settings, 

-Border = min (8, ri), -Bdcgroc = 10 and ^singular == 10 . 

These bounds are constant in order to keep the total time complexity quasi-linear in 
n. More precisely, the bound -Border is chosen to be at most 8 so as to take advantage 
of the classification work of [17], the bound -Bdcgree is chosen to cover all the possible 
fundamental covariants of degree 8 and with order between 4 and 8 (c/. [17, Table 
2]), and the bound -Bginguiar so as to increase the probability that our covariants, if 
singular, have distinct points of singularity (so that a linear combination may be 
non-singular). 

Remark 1.9. We may indeed enter the last loop of the algorithm even if the form / 
has no geometric automorphisms (for instance for the degree 8 form x^z -I- 7x^z'^ + 
Ix^z^ + 8x^z^ -H 2x^z^ + lOx^z^ + 9^2;7 oygj. ;, ^ ^^^y 

We have programmed the algorithm in MAGMA v2.18-2, on the basis of the first 
setting. In particular, we have implemented the covariant C4.2 using (8), and we 
have measured the timings of the resulting procedure, IsGL2EquivCovariant, in 
the same experiments as in Section 1.2. The results are in Table 1. As expected, 
computing isomorphisms is much faster with the help of covariants, even if the 
forms are split over k. 
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1.5. Application to isomorphisms of hyperelliptic curves. 

1.5.1. Isomorphisms of forms and of hyperelliptic curves. A curve X of genus g>l 
defined over k will be called hyperelliptic if X/A' allows a separable degree 2 map to 
P}^. The curve X then has a unique involution t, called the hyperelliptic involution, 
such that Q = X/(t) is of genus 0. This involution is in the center of Autx(X). We 
call Aut(X) = Aut(X)if/(i) the reduced automorphism group of X. 

Let us assume from now on that p ^ 2. Then if Q has a rational point, X is 
birationally equivalent to an affine curve of the form y^ = f{x) for a separable 
polynomial / of degree 2g + 1 or 2g + 2. We say that / is a hyperelliptic polynomial 
and that X has a hyperelliptic equation if a curve in the isomorphism class of X (over 
k) can be written in the form above. We denote by X/ such a curve associated to 
a hyperelliptic polynomial. A hyperelliptic curve automatically has a hyperelliptic 
equation when k is algebraically closed or a finite field. However, for more general 
fields and curves of odd genus, this is not necessarily the case (see [17]). 

By homogenizing to weighted projective coordinates of weight (l,.g + 1, 1), we 
obtain an equation y'^ = f{x, z). Here / is seen as a form of degree 2g + 2, taking 
into account a 'root' at infinity when deg/ = 2g + 1. With this convention, the 
roots of / are the ramification points of the cover X/Q. We will use these conven- 
tions for the roots and degree in the sequel when we speak about a hyperelliptic 
polynomial or the associated form. 

If /i and /2 are hyperelliptic polynomials of even degree 2g + 2 > 6, then iso- 
morphisms of hyperelliptic curves y^ — fi{x,z) arc represented by (A/, e) with 

M = , £ GL2(fc) and e £ k*. To such a couple, one associates the isomor- 

phism (x,z,y) i—> {ax + bz,cx + dz,ey). The representation is unique up to the 
equivalence (M, e) = (AM, A^+^e) for A E k*. Hence, if A'/./i = /i • ./2 then the map 

Isom(/i,/2) ^ (GL2(fc)xA*)/=, 
M ^ {M,±y^) 

is well-defined up to the choice of a sign. It surjects onto Isom(X/j , X/^ ) , so knowing 
Isom(/i,/2) is enough to determine Isom(X/j , X/2 ) 'up to the hyperelliptic involu- 
tion'. 

1.5.2. Hyperelliptic curves of genus 2 and 3. The covariant approach requires a 
covariant with at least three distinct roots, and hence may fail in special cases, 
which we can specify for small genera. We give some details on the more difficult 
of the two cases which is the genus 3 case. This problem is naturally stratified by 
the possible automorphism groups of the curve, which we give in Figure 1, together 
with normal models and inclusion relations between the strata. We assume here 
that p = or p > 7. 

The moduli space of hyperelliptic curves of genus 3 is of dimension 5 and can be 
explicitly described using the Shioda invariants J2, J3, . . ., Jio constructed in [21]. 
These invariants were used to speed up the calculations leading to the proof of the 
following proposition, which shows that the locus where the covariant method fails 
is of codimension 4 in the full moduli space. ^ 



We refer to http : //iml .univ-mrs . f r/~ritzenth/progrcmime/explicit-descent/isocovgenus3 .zip 
for the MAGMA parts of our proofs till the end of this section. 
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Ci4 Ue Vs C2 X S4 



Figure 1 . Automorphism groups of genus 3 hyperelliptic curves 



Proposition 1.10. Let Xf/K : y^ = f{x) be a genus 3 hyperelliptic curve such that 
the form f cancels the discriminants of all its quartic covariants. Then Aut(X/) 
contains either D12, C2 x Dg or C14. 

Proof. Construct C{f)±K- I{f)-C'{f) such that deg(C) = deg(/)+deg(C"), where 
C and C" run through the 14 fundamental quartic covariants given in [17, Table 2], 
where /(/) equals either 1 or a Shioda invariant Ji{f), and where k runs through 
the integers between and 10. We rewrite the discriminant of these covariants in 
terms of Shioda invariants and add to them the five Shioda relations [21, Th. 3, 
p. 1042]. Using MAGMA, we have been able to compute a Grobner basis of this 
polynomial system, over Q, for the graded reverse lexicographical (or 'grevlex') 
order J2 < J3 < . . . < Jio with weights 2,3,..., 10. Upon removing multiplicities, 
we obtain a basis with 22 polynomials, of total degree between 8 and 20. One then 
checks, using the stratum formulas from [17], that the irreducible components of 
the corresponding subscheme of the moduli space either correspond to families of 
forms with discriminant zero or to strata of curves Xf such that Aut(X/) contain 
D12, C2 X Dg or C14. □ 



Proposition 1.10 does not exhibit separable quartic covariants for the curves 
with automorphism group D12, C2 x Dg or C14. Using the normal models and 
Proposition 1.5, one can show that 

• if Aut(X) is equal to D12 or Ug then the sextic covariant C3.6 = ( ( /, /)4, /)s 
has non zero discriminant; 

• if Aut(X) contains C2 x Dg or is equal to C14 then there is no order 4 or 
6 covariant with three distinct roots. 

The number of covariants considered in the proof of Proposition. 1.10, i.e. 1253, 
is not minimal, but the redundancy helped MAGMA during the Grobner basis com- 
putations. Nevertheless, similar computations show that we can easily reduce this 
number for curves with automorphism group larger than C2 (and moreover im- 
pose conditions on the automorphism groups of the covariants, cf. Sections 2.2.2 
and 2.3.2). For the following genus 3 hyperelliptic curves over K with given au- 
tomorphism group, at least one of the following quartic covariants has non-zero 
discriminant 
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Case D4: C2A = ( /, /)6, C3,4 = ( ( /, I)i, fh, C^A = (((/, /)4, /)6, /)4, C^,4 = 
( ( ( /, /)4, /)4, /)6 or 6-5,4 =((( ( /, /)4, /)6, /)l, f)?; 

Case C4: 02,4, 03 4, 04 4 or 04 4; 
Case Cj: 62,4 , 63^4 or (74,4; 
Case C2 X C4: C3,4. 

Remark 1.11. Similar conclusions hold for genus 2. Specifically, there is no quartic 
covariant with non-zero discriminant for the curves Y-f / K such that D12 C Aut(Xj) 
or Aut(X/) ~ CiQ. Moreover, when Aut(X/) ~ Dg then {f,f)4 has non-zero 
discriminant, and when Aut(X/) ~ D4 then at least one of (/, f)^, (((/, f)2, f)i, f)i 
or ((((/, 1)2,1)3, f)2,f)e has non-zero discriminant. 

2. Explicit descent for hyperelliptic curves 

2.1. Field of moduli and fields of definition. Let X be a curve defined over K 
of genus g > 1, let fc be a subfield of K, and let F be the prime field of K. 

Definition 2.1. The field of moduli of X, denoted Mx, is the subfield of K fixed 
by {a e Aut(A'), X ~ -^X}. 

We now restrict to hyperelliptic curves and we assume that p ^ 2. So let X = X/ 
be a hyperelliptic curve over K given by a hyperelliptic polynomial / of even degree 
n. Our first task is to show that we can get information on Mx through the 
invariants. 

Lemma 2.2. Let /i,/2 be two invariants of the same degree for binary forms 
of degree n. Assume that /i,/2 are defined over F and that l2{f) 7^ 0. Then 

i = /l(/)//2(/)€Mx,. 

Proof. It is enough to prove that for all a G Gal(ivr/Mx), l'^ = i. By definition of 
Mx, there exists an isomorphism between X and '^X. We have seen that such an 
isomorphism induces an element AI G Isom(/, f^). Therefore 

,, /i(r) h{x-M.f) , 



/2(/-) hiX-M.f) 



D 



It is not always practical to work with a fixed quotient of invariants as above, 
since /2(/) may be zero. As shown in [17], it is better to work inside a weighted 
projective space, for elements of which one can define a canonical representative as 
follows. Let (Ji : . . . : /„) be a to > 2-uplc of invariants of degree di of degree n 
binary forms, and suppose each li is defined over F. Let / be a binary form of 
degree n. Let d be the gcd of the degree di of the invariants li which value at / is 
not zero. Then there exists c^ € Z with c^ = if Ii{f) = such that ^ Cidi — d. We 
then define / = Yii ^i^ ■ Then the canonical representative of {Ii{f) : . . . : Im{f)) is 

pi (/),..., D(™(/)) = (^j(y)di/d'---' jj)d„/dj ^eM;^"- 

Proposition 2.3. Let (/i : . . . : /„,) be a set of generators for 1,1 defined over F. 
Then 

Mx = F(3i(/),...,3,„(/)). 

Proof Let a G Gal(X/Fpi(/), . . . , 3m{f))). Since (3i(r), . . . , 3™(r)) = (3i(/), 
. . . , Jm(/)) and In separates the orbits of separable forms [18, p. 78], there exists a 
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matrix M G GL2{K) such that M.f ^ f"', hence an isomorphism between X/ and 
-Xf. D 

With our current knowledge of invariants, we are then able to compute Mx , for 
n = 6,8, 10. However in the following applications to descent we will see that we 
often do not need a complete set of invariants. 

Definition 2.4. We say that A: is a field of definition of X if there exists a curve 
X/k such that X is /v-isomorphic to X. The curve X/k is a model of X over k and 
we call a geometric isomorphism between the two curves a descent isomorphism. 

A classical problem is to know what the smallest field of definition of a curve 
is. Assuming for simplicity that every subfield of K is perfect, if Mx is a field of 
definition then it is the smallest field possible, since it is the intersection of all the 
fields of definition (see [15] (or [12, Th.1.5.8]). There might be an obstruction for 
Mx to be a field of definition but if there is none we will denote X a model of X over 
Mx. In the case of hypcrcUiptic curves of odd genus, there is a subtlety: X does 
not necessarily admit a hyperelliptic equation. However if it does, we will say that 
X can be hyperelliptically defined over Mx and we denote f € Mx[a;] a hyperelliptic 
polynomial associated to this model. 

One can find in the literature several sufficient conditions for the curve to be 
hyperelliptically defined over Mx. For instance it is always the case when K is the 
algebraic closure of a finite field (see [13, Cor. 2. 11]). Thanks to the work of Huggins 
[13], over an arbitrary algebraically closed field K, if the reduced automorphism 
group is non cyclic then the curve can be hyperelliptically defined over its field of 
moduli. For g = 2, it has been proved that if the reduced automorphism group is 
non-trivial, then the curve can be hyperelliptically defined over its field of moduli 
[4]. This is still the case for g ~ 3 except for curves with reduced automorphism 
group isomorphic to Cj (see [17] and Section 2.3.2). 

2.2. Explicit hyperelliptic descent. Now let X/ be a hyperelliptic curve over 
K that can be hyperelliptically defined over Mx. We want to find f G Mx[x] and 
A e GL2{K) such that f ^ A.f. The first task is of course to compute Mx. As 
we have seen, this can be done if we have a set of generators for the invariants 
of the form /. However, if this is not the case and we have only some invariants 
(/i, . . . , /„) over F with m > 2, we can always try to hyperelliptically descend Xf 
over the field k generated by (3i(/), . . . , 3m(/)). Since k C Mx, if this can be 
achieved, we are done. 

2.2.1. The cocyle approach. The direct approach relies on the following slightly 
modified version of Weil's cocycle relations (see [17]). 

Lemma 2.5. Xf can be hyperelliptically defined over k if and only there exists a 
finite extension k' /k such that for all a G Gal(AY/(;), there exists M^ € GL2(fc') 
such that M^ € Isomfc/(/, f^) and for all a,T e Gal{K/k), M^a = M^M„. 

Assume that Xf can be hyperelliptically defined over k and let (f) : Xf -^ X^ 
be a descent isomorphism. It induces a matrix A e IsomA'(./, /i) C VGIj2{K). We 
can define for all a £ Ga.\{K/k), Ma- = {A~^)°'A for any choice of a representative 
A G GL2{K) of A. It is easy to check that it satisfies all the hypotheses of the 
lemma. Moreover if A is defined over a Galois extension L/k then k' C L and we 
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have for all a e Gal(A'/fc) such that <j\i^ = id that Ma- ~ id. Conversely, the crucial 
step to construct such an A is to identify a Galois extension L/k satisfying this 
property, since in this case one can use an explicit version of Hilbert 90 as in [20, 
p. 159, Prop. 3]: for a general matrix P G GL2{k') the matrix 

A= V P^Mr (9) 



TeGal(L/fc) 



gives a descent morphism. 



Lemma 2.6. Assume that f is defined over an extension k' ofk. If Autnif) = {id} 
then we can take L to be the Galois closure ofk'/k. 

Proof. We have to prove that A can be defined over such an L. Let A' be induced 
by a descend morphism. Since A' G Isotoik {f,h) then for all a € Gal{K/L), 
{{A'y^yA' e IsomK(/, /°") = Aut_Rr(/) hence there exists A^r G K* such that 
{A')"' = Xa ■ A' . One can easily check that the Xa satisfy a cocycle relation so there 
exists e £ K* such that A^ = e/e"^ for all a. We then define A = e ■ A' and we are 
done. D 

As far as we know, there is no easy way to determine such an L when the 
automorphism group is non trivial (see [17] though when fc is a finite field). Naively, 
one would expect to be able to construct the cocyle over the field Lq over which 
all isomorphisms between / and its conjugates are defined. Typically, what then 
happens is the following. Let a G Gal{Lo/k) be an element of order n. Then usually 
no Ma- exists over Lq such that the cocyle condition 1 = Ma" = Af^ • • • M '^ • M 
is satisfied. We have to work with matrices of the form XMa, where A belongs to 
a quadratic extension L of Lq. This enlarges the field and the Galois group, which 
may in turn give rise to more problems of the same type. Even if this problem can 
be resolved, the computation of (9) is time-consuming and limited to small degree 
extensions (less than 50) in practice. We present in the next section a new idea 
which works extremely well in certain cases to get around these difficulties. 

Remark 2.7. If we only want Xf to have a model over fc, instead of a hyperelliptic 
model, the cocycle condition is weakened to 

Mra =- XM^Ma, Cra = A^+l -^ 

Here A G i*, and the pairs {Ma,ea) are such that /°" ~ e^Maf. Even under 
these weaker conditions, wc do not know a general method to address the problem 
effectively. 

2.2.2. The covariant approach. Using covariants, we can sometimes reduce the 
problem of descent for X^ to that for a lower genus curve. 

Theorem 2.8. Assume that there exists a covariant C of order r > 4 such that 

c = C{f) is a hyperelliptic polynomial and let Xc : y^ = c{x) be the associated curve. 

Then Mx, C Mx^ . 

Moreover, if Xc is hyperelliptically defined over Mx^ then Xf is hyperelliptically 

defined over an extension of degree at most # Autx(c)/ Aut/^(/) o/ Mxj, . 

In particular if Ant k{c) = Autj^ (/) and ifXc is hyperelliptically defined over Mx^ 

then Xf is hyperelliptically defined over Mx- . 



14 REYNALD LERCIER, CHRISTOPHE RITZENTHALER, AND JEROEN SIJSLING 

Proof. Let cr e F = Gal(A'/Mx^). Then there exists a A'-isomorphism between X/ 
and '^X/ which induces a matrix M G Isoniif(/, /'^). Since we have the inclusion 
Isoniif (/, f"') C IsoTaxic, c"') by Proposition 1.5, we get a ^^-isomorphism between 
Xc and '^Xc, so Mx, C Mx^. 

Assume now that Xc can be hyperelliptically defined over Mx^ as X^ with the form 
c € ]V[x^[a;]. There exists A S Isomi4-(c, c). Let us consider h = A.f, that we can 
assume to be monic. We want to prove that h is defined over an extension of degree 
at most 

^ = # AutK(c)/AutK(/) = # Aut/^c)/ Autx(/i) 
of Mxf = Mxh- First note that C{h) ^ A.C{f) ^ c. Let H C T be the subgroup 
of automorphisms <t such that h ^ h'^ . We even have h — h"^ a.s we have assumed 
that h is monic. So we have to show that ^T/H < £. In order to do this, note 
that for all ct e F, c'^ = c. Hence we can associate to each cr G F a matrix 
M £ Isomif (/i, /i"^) C Autx(c). Actually, this gives rise to a well-defined class of 
Aut/i-(c)/ Autif (/i). Hence we have defined a map p from F to Aut/s-(c)/ Aut_R-(/i). 
If p{a) = p(c') then we have h"' ^ h°' , hence cr~^cr' G H . Therefore p induces an 
injective map from T/H to Autii-(c)/ Auti^ (/i) and we get our result. D 

The theorem can be used in a constructive way as soon as one is able to find 
a covariant whose automorphism group is finite and for which it is known how 
to define it hyperelliptically over its field of moduli. We give some examples in 
Sections 2.3 and 2.4. 

Remark 2.9. There may be no equality between Mx, and Mx^, even if the auto- 
morphism groups of the forms are the same. For instance, the field of moduli of 
/ = (x^ -I- rx^z^ + z^){x^ — irx^z^ + z^), where r is a root of t^ +2t + 16/9 = 0, is 
Q(r). But the field of moduh of c = (/, /)6 = 16/49a;4 + 992/441x2 + 16/49 is Q. 
Using the programs of [17], one sees that Aut/<-(/) = Autj^ (c) ~ D4. 

2.3. Application to genus 3 hyperelliptic curves. In [17], the two first authors 
give algorithms for reconstructing genus 3 hyperelliptic models from given invari- 
ants. These models are defined over the field of moduli, with the notable exception 
of the dimension 2 stratum Cj and the dimension 3 stratum D4. As an illustration 
of our strategy, we see how our method applies in these remaining cases. 

2.3.1. Descent of curves with automorphism group C\. Let X/A' : y^ = f{x) be a 
genus 3 hyperelliptic curve with automorphism group isomorphic to C\. Since the 
reduced automorphism group is not cyclic, [13] shows that X can be hyperelliptically 
defined over its field of moduli. In [17], we showed how to construct a hyperelliptic 
equation for a model over an extension of degree at most 3 of the field of moduli. 
Using covariants, we can now give a method to get the equation over the field of 
moduli. 

In Section 1.5.2, we have checked that at least one of the quartic covariants in 
the list {C2,4(/), C34(/), C'4,4(/) } has a non-zero discriminant. Moreover, by 
Proposition 1.6, we see that the automorphism group of such a quartic is equal 
to D4 if the quartic invariants / and J are both non-zero. Using some formal 
computations 2, we checked that this is always the case for at least one of the three 
covariants. Since Aut ;<■(/) ~ D4 we can use the approach of Theorem 2.8 to find 
a hyperelliptic equation j/^ = f(a:) over the field of moduli. The procedure can 



see the magma scripts http : //iml . univ-mrs . f r/~ ritzenth/programme/explicit-descent/isocovgenusS . zip. 
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actually be applied to a generic element of the family but the result is too large to 
be written down so here is an example. 

Example 2.10. When we evaluate the parametrization formulas given in [17, Ap- 
pendix A] for the stratum Cf at t = and w = 1, we find the rational point 

/ 25 25 225 25 225 1125 15125 \ 

(i2 : 73 : • • ■ : jio) =0:0: : : : : : : 

V 98 98 2744 1372 134456 76832 3764768/ 

in the moduli space. This gives rise to the curve X : y^ = f(x) with 

f{x) = (-32 a^ + 420 o - 2275)/160 x^ + (-12 a^ + 140 a - 700)/25 x^ 

+ a x*' + x'^ + (16 a^ + 280 « - 2275)/12250 

over Q(a), where a^ - 35/2 a^ + 1925/16 a - 18375/64 = . By Proposition 2.3, 
Let c be the covariant (/, f)^. We find 

c = (-16 a^ + 180 a - 875)/280 x^ + (24 o? - 630 a + 3150)/1225 x^z^ + (4 a + 35)/490 2* . 

Thus I~ -75/49, J = -2025/343 and consequently c = x^ z + 25/9 x 2^ + 25/9 z^ 
is GL2(<Q)-cquivalcnt to c, defined over Mx and AutQ(c) ~ D4. The direct approach 
of Section 1.2 explicitly finds a Q-isomorphism M between c and c. Its inverse equals 
M~^ = {■mij)ij, where 

mil = 110250, 

mi2 = (3360 a2 _ 588OO a + 147000) l3^ - 16800 a^ + 147000 a - 18375 , 

m2i = (-2064 0^ + 24780 a- 60900) /33 + (-3120 q2 +67200 a -375375) /3, 

m22 = (-5840 a2 4. 74900 a- 280000) /3=* + (16880^2 -173600 a + 487375) /3. 

Here /3 satisfies /34 + (32a2_280a+350)/175/32- (176 a2-1820a+-7350)/175=0. 
We compute the monic form f ~ M.f , 

f = x^ + 160 x^ - 560 x^ - 2800 x^ + 64750 x* - 91000 x^ + 3010000 x^ - 2225000 x - 9696875 . 
So y^ = f{x) is a model of X over Mx = Q. 

2.3.2. Descent of curves with automorphism group D4. It has been proved in [12, 
Chap. 5] that there may be an obstruction for a genus 3 hyperclliptic curve over 
K with automorphism group isomorphic to D4 to have a model over its field of 
moduli. In [17], we were able to construct a model of such curves over an extension 
of degree at most 8 of the field of moduli. Using Theorem 2.8, we can now prove 

Proposition 2.11. Let Xf be a genus 3 hyperelliptic curve over K with automor- 
phism group isomorphic to D4. Then there exists an explicit model ofX over an at 
most quadratic extension o/Mx. 

Proof. Applying the methods of Proposition 1.10 to the stratum D4 shows that at 
least one of the five binary covariants C2,4(/), C3,4(/), C4,4(/), C4 4(/), C54(/) has 
not only a discriminant different from 0, but also /(/) 7^ and J(/) 7^ 0. "^ One 
then combines Proposition 1.6 and Theorem 2.8. D 

We plan to investigate how to apply the theory of twists to the binary quartics 
used in the application of Theorem 2.8 to give a precise characterization of the 
obstruction to the descent on the field of moduli. 



see the magma scripts http : //iml . univ-mrs . f r/~ ritzenth/programme/explicit-descent/isocovgenusS . zip. 
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2.4. Application to a family of Puertes-Gonzalez-Diez in genus 5. Let k be 

the degree 3 Galois extension of Q defined by the irreducible polynomial t^ — 3t+l. 
Let ri,r2,r3 be its roots in k. Then as in [9], wc can consider the family 



.2 _ TT (^4 on r^ra - n m 

4=4,5,6 



r= n (x4-2(l-2^i-^^i^^)x^ + l) (10) 



of genus 5 hyperelliptic curves, with q4,q5,qe in Q. It was proved in [9] that the 
members of the family (10) have field of moduli equal to Q and automorphism 
group isomorphic to Cj. Moreover, it was claimed in [9] that these curves cannot 
be hypcrcUiptically defined over Q, in contradiction with [13]. However, the proof 
turns out to contain a subtle error. Still, the explicit descent of any of the member 
of the family was extremely hard. 

Using Theorem 2.8, we can, as in Example 2.10, construct an explicit descent 
for the curves in this family For this particular family, the descent can even be 
performed uniformly to yield a general expression in (74, (75, gg- Let F ~ fc(g4, 95, ge) 
be the rational function field over k in three indetcrminatcs, and define the binary 
quartic form / G ^[•'J;,^] as the homogenization of the right hand side of (10). 
Let c be the transvectant (/, /)io- Then c is a covariant of order 4 with non-zero 
discriminant and non-zero /(c) and J{c), hence with automorphism group D4. The 
field of moduli of Xc is contained in the field of moduli of Xf which is a subfield 
of Q(94, 95,<3'6): therefore the quartic c as in (6) is defined over Q(g4, 95,96) a-nd is 
GL2(-F')-equivalent to c. 

Now let L be the degree 4 extension of F defined by the dchomogcnization of c. 
From Proposition 1.7, we can explicitly construct an L-isomorphism between c and 
c. This transformation gives a descent of the curve corresponding to c, which by 
Theorem 2.8 also yields a descent of the curve corresponding to /. The resulting 
expression, though indeed defined over the rationals, is huge and impossible to give 
here. However, we can give an example for a specialization. 

Example 2.12. Take 94 = 1, 95 = 2, 9g — 3. The hyperelliptic equation over Q is 
y'^ =1999502475750;^^ - 296949924611352a;" - 66659816245812750x1" 
- 15421975495507360656x^ -I- 2005635519424553708745x** 



■ 9718847083908693649803959136x5 -I- 93749472927036312839424054441x'' 

- 86331359417888600607650948443656x3 - 7423912080663182513045938205161326x2 

- 249511197641168404939510946041515184X - 3006656143858472317763973580984260681. 
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